CA Service Metric Analysis / CA Service Level Management code execution
Published:		11.01.2009
Source:		BUGTRAQ
SecurityVulns ID:		9571
Type:		remote
Level:		6/10
Description:		It's possible to execute commands with snmp service.

Affected:		CA : CA Service Level Management 3.5
		CA : CA Service Metric Analysis 11.0
		CA : CA Service Metric Analysis 11.1
CVE:		CVE-2009-0043 (The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.)

Original document

CA, CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability (11.01.2009)

Discuss:

Read or add your comments to this news (0 comments)